Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
File:                     9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json)
Hash identifier:          urH0k1O7+0Js+4PhkyjOQPa9LzkknTPaU4yaNwoGIoY=
Subject key identifier:   34:EA:B9:88:10:2C:B9:B8:AB:66:54:D1:71:F5:2A:4D:82:09:5D:C6
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Certificate issuer:       /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
Manifest number:          020B
Signing time:             Mon 02 Mar 2026 00:52:34 +0000
Manifest this update:     Mon 02 Mar 2026 00:52:33 +0000
Manifest next update:     Mon 09 Mar 2026 00:52:33 +0000
Files and hashes:         1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: rKNJga/Kd1H/WYqw7QU2WMRV1K3SO+VUNcC0J4ZRjYg=)
                          2: 57CB703EBCED11F0A3B2C039C4F9AE02.roa (hash: HmphuBJz1itHufEL3Qyt1SYUAe9S5fBZX10hGcyn3zo=)
                          3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: 2WIRh8C1NRfXoaudkhecu2rsWekwTi6PhemeKSKaYFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
        Validity
            Not Before: Mar  2 00:52:33 2026 GMT
            Not After : Mar  9 00:52:33 2026 GMT
        Subject: CN=69a4df52-8a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:64:76:02:93:77:25:84:b3:25:62:22:30:
                    6e:21:cb:0e:df:fd:0b:f0:92:34:45:52:ab:47:74:
                    68:db:9f:96:28:5b:af:69:f8:c4:9c:db:da:08:63:
                    bd:f9:d7:f4:b6:82:72:17:8b:0f:68:ee:fd:16:15:
                    8d:0c:32:cb:c0:88:ed:ef:2c:5b:01:ea:25:a4:55:
                    06:05:e7:42:63:23:de:6f:12:24:46:98:7c:c3:db:
                    4f:0b:4c:fd:d4:55:1e:fd:ea:24:0d:b5:0d:da:d5:
                    07:01:16:53:cb:18:e9:aa:72:30:7e:67:89:83:99:
                    8f:ae:91:70:d4:17:82:f3:ca:87:92:3e:91:bd:a3:
                    5c:fb:3c:fd:a4:41:0d:99:c2:21:10:0c:b4:db:de:
                    c0:7b:14:f6:df:c4:17:7e:7a:61:fd:d1:7e:59:4d:
                    5a:33:03:58:04:03:30:07:f3:90:e2:62:25:d2:a7:
                    e4:c4:e2:b2:90:21:f7:41:aa:ad:42:72:07:2e:a0:
                    74:67:6b:89:54:13:f8:d8:3a:98:48:0d:43:76:70:
                    36:7b:f2:18:ad:76:1a:ea:a6:20:3b:c8:68:80:ea:
                    27:f3:60:29:ca:ae:d9:0f:07:84:88:fe:e0:75:c9:
                    ee:b6:29:16:06:93:79:ac:9f:64:82:6a:2f:c8:a7:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EA:B9:88:10:2C:B9:B8:AB:66:54:D1:71:F5:2A:4D:82:09:5D:C6
            X509v3 Authority Key Identifier:
                keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:99:9d:e5:78:27:fb:49:d3:e9:32:21:21:c8:25:8e:70:7b:
         37:b1:17:82:ea:19:2e:62:6a:32:bb:fc:9c:a0:47:f5:58:6e:
         7c:e2:ae:a6:07:50:46:1f:72:95:4f:96:40:02:6a:dd:f7:12:
         73:ec:10:2e:f3:17:ee:67:71:94:c2:d4:83:0a:30:7c:71:83:
         2e:16:8e:a0:90:b3:05:2e:3d:40:67:08:55:4f:40:96:83:18:
         ce:94:01:82:c9:95:d4:29:bf:79:58:98:b0:6b:ce:69:45:aa:
         d7:c4:f6:fb:56:fa:51:bd:20:37:49:a5:4c:6c:2a:b4:88:91:
         aa:71:41:e7:46:77:28:b1:c3:0c:fd:72:23:3e:e7:7a:42:44:
         06:98:98:df:99:8a:c7:96:c0:e3:cc:a8:7e:97:62:d1:4c:77:
         f2:2a:76:e5:3b:de:d0:f2:be:c7:90:0b:95:9d:e8:29:5c:8d:
         58:d6:7d:f5:0f:26:ed:98:2c:fd:db:b6:af:f3:42:98:73:f9:
         b1:34:64:d1:93:6f:60:89:77:d2:4c:6d:d5:97:f5:a4:f0:7e:
         11:82:77:a7:60:dc:3e:88:e1:ec:e5:a3:42:2a:fa:e5:43:15:
         85:90:c8:c8:c7:c2:05:ed:17:f1:d5:be:1b:11:02:42:83:34:
         03:7c:3a:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBFNkExMTAvBgNVBAUTKEY1NDU5Q0JBMzFGOTMzRjkwNzNCNTE0QzlDQkJFQzM0
RjZFRDJFNEEwHhcNMjYwMzAyMDA1MjMzWhcNMjYwMzA5MDA1MjMzWjAYMRYwFAYD
VQQDEw02OWE0ZGY1Mi04YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7ONkdgKTdyWEsyViIjBuIcsO3/0L8JI0RVKrR3Ro25+WKFuvafjEnNvaCGO9
+df0toJyF4sPaO79FhWNDDLLwIjt7yxbAeolpFUGBedCYyPebxIkRph8w9tPC0z9
1FUe/eokDbUN2tUHARZTyxjpqnIwfmeJg5mPrpFw1BeC88qHkj6RvaNc+zz9pEEN
mcIhEAy0297AexT238QXfnph/dF+WU1aMwNYBAMwB/OQ4mIl0qfkxOKykCH3Qaqt
QnIHLqB0Z2uJVBP42DqYSA1DdnA2e/IYrXYa6qYgO8hogOon82Apyq7ZDweEiP7g
dcnutikWBpN5rJ9kgmovyKdkDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTquYgQ
LLm4q2ZU0XH1Kk2CCV3GMB8GA1UdIwQYMBaAFPVFnLox+TP5BztRTJy77DT27S5K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU2QS80QzI4MUJCRTEx
QTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1fa0hPMUZNbkx2c05QYnRM
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlVV2N1akg1TV9rSE8xRk1uTHZzTlBidExrby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEU2QS80QzI4MUJCRTExQTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1f
a0hPMUZNbkx2c05QYnRMa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADZmd5Xgn+0nT6TIhIcgljnB7N7EXguoZLmJqMrv8nKBH9VhufOKupgdQRh9y
lU+WQAJq3fcSc+wQLvMX7mdxlMLUgwowfHGDLhaOoJCzBS49QGcIVU9AloMYzpQB
gsmV1Cm/eViYsGvOaUWq18T2+1b6Ub0gN0mlTGwqtIiRqnFB50Z3KLHDDP1yIz7n
ekJEBpiY35mKx5bA48yofpdi0Ux38ip25Tve0PK+x5ALlZ3oKVyNWNZ99Q8m7Zgs
/du2r/NCmHP5sTRk0ZNvYIl30kxt1Zf1pPB+EYJ3p2DcPojh7OWjQir65UMVhZDI
yMfCBe0X8dW+GxECQoM0A3w62A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:05 2026 by rpki-client